[KCTIM]

It's the weirdest thing because when I go into the MS-Office Folder in Explorer, my office programs aren't there. But they're all somewhere because when i do a search for Excel, the attached screenshot is what I get. If I open up one of the Excel programs on there I can get into Excel and create/save new spreadsheets. Same thing with Microsoft Paint. It's not in the start menu, but in order to create these screen shoots I'm attaching, I first have to search for paint in explorer, and open it from there to run it.

Attached Thumbnails

• 

[Advertisements]

Are the file paths correct for the programmes i.e. is paint in %windir%\system32\mspaint.exe

[Essexboy]

Are the file paths correct for the programmes i.e. is paint in %windir%\system32\mspaint.exe

[KCTIM]

Not sure how to check that. When I do a search for MSpaint it brings up all sorts of hits. One MSpaint app is in the C:\Windows\System32 if that's any indication

[Essexboy]

The location is right - Have you tried a system restore to before the infection ?

[KCTIM]

Can't restore, somebody else I was working with before you had me disable/re-enable it when we thought we had it clean to eliminate the possibility of it hiding...Is there a way I can search for the programs I need/use a lot and add them into the start menu?

[Essexboy]

Can't restore, somebody else I was working with before you had me disable/re-enable it when we thought we had it clean to eliminate the possibility of it hiding

This is always a bad move, as a bad restore point is better than none

I do not have my XP running at the moment - I will try it shortly

But could you look at this MSKB and see if it helps

[KCTIM]

Yeah, I'm realizing that now...
Do you have any suggestions to speed me back up? My PC seems to be lagging after all that's been done to it. Will a simple Defrag fix this?

[Essexboy]

As you have no valuable restore points I will run the full cleanup now and then we can continue on the current problem

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :Commands
  [resethosts]
  [purity]
  [emptytemp]
  [EMPTYFLASH]
  [CLEARALLRESTOREPOINTS]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done

Click Start > Run and copy/paste the following bolded text into the Run box and click OK: N.b. If used

ComboFix /Uninstall

Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.

We will now confirm that your hidden files are set to that, as some of the tools I use will change that

• Click Start.
• Open My Computer.
• Select the Tools menu and click Folder Options.
• Select the View Tab.
• Under the Hidden files and folders heading select Do not show hidden files and folders.
• Click Yes to confirm.
• Click OK.

SPRING CLEAN

Download and run Puran Disc Defragmenter
For the first run I would recommend a boot defrag and disk check




Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

Malwarebytes. Update and run weekly to keep your system clean

Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To keep your operating system up to date visit

• Microsoft Windows Update

To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?
Keep safe

[KCTIM]

Thanks for all your help, looks like we got it licked. I figured out how to get my stuff back in the Start Menu too. Just gotta find everything that's missing and click an drag it to it's spot.

I have one final question for you. My Anti-virus is Symantac Corporate Edition, I got from my work so I can do work on my personal computers. Do you think it's reliable enough to keep or should I get a new one?

[Essexboy]

Difficult question as everyone has their own favourite, at the end of the day most AV's are similar so it is best to keep the one you are comfortable with. If you wish to try out a new one then I could give a list of the free versions with my thoughts

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.